Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Производитель ПО
Наименование ПО
Описание
Vim (Vi IMproved) is an updated and improved version of the vi editor.
Security Fix(es):
* vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c (CVE-2021-3778)
* vim: use-after-free in nv_replace() in normal.c (CVE-2021-3796)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.5 Release Notes linked from the References section.
Security Fix(es):
* vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c (CVE-2021-3778)
* vim: use-after-free in nv_replace() in normal.c (CVE-2021-3796)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.5 Release Notes linked from the References section.
Как исправить
Используйте рекомендации производителя, доступные по ссылке https://access.redhat.com/knowledge/articles/11258
Ссылки
Источник: CVE
Наименование: CVE-2021-3778
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3778
Источник: CVE
Наименование: CVE-2021-3796
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3796
https://access.redhat.com/errata/RHSA-2021:4517
Наименование: CVE-2021-3778
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3778
Источник: CVE
Наименование: CVE-2021-3796
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3796
https://access.redhat.com/errata/RHSA-2021:4517
